Analysis

  • max time kernel
    17s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    05-02-2025 02:28

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4634

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    2bb7b95a9b841262b475a422e0759992

    SHA1

    78774a25493ab9f1223a24ddc03c3475bf2268a5

    SHA256

    e2e6ba43a5294526b6839b18e206797dbab1aaeb5bf8457a7f7f9b875c69dced

    SHA512

    b992e7bb97058111f12c2b559f11ec1abfc1c168d77376145438d6d82ea2c120fe4d1e805d90e4799e91eb65db9214eab9e8f3ec3a9ac834c2c3acd729a3d357

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    37e4807b46f4b341d7bff815ba540041

    SHA1

    b8fd5c84e449c7ed61e0afb4f8db0650799a0119

    SHA256

    359e0fea7af7f7cd639eee4aa225f4fd18500109d76004343ed22e6ce19d8394

    SHA512

    02c5fb2039cf3825f6d9fdece67335566f7fc70db5fc929ed1804e84902994bb664f1dbb9b4b396245cbdd03473bfeacd134997848f53df0fd214d9fb8f3da62

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    c919e842c8e0b92300e9a637d49c2d28

    SHA1

    4b1a6e3a87cff2370125061dedebad7a22f82f61

    SHA256

    22f80456f91f355fdb39f28ec33f9dd5782696dfc749e840a17a6f03cccf3ad3

    SHA512

    130d2a1f0079eff0ab6795fa331f21f3749128eb80830bec28c1e4189a6c4b4476835ea8cc41ed0018eb473b90b2a109110d7bf99a843055e5862299b17a1fda

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    8a4881ae547edd530ebe9c897a6d204b

    SHA1

    f4146e2975461491fde09d00a21e1788cc1ec102

    SHA256

    9d4562779e7910b95be642e9a8849716e3d96c2bbdfeab82ae76e3cf9ec4fa1a

    SHA512

    311db42c4b18315e7ff25b5832430d44cdf52d0ffc12d318df8a61a6197fc28dedcfc7639a3cb88b421a8eb75c4c43e48d11069c333ff01ddbeee47b8d6cf4ec

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1eb88d0a6080c3f232db7556691eb45d

    SHA1

    cd30a3a44567b0c7fe2adb704819240903f01fe8

    SHA256

    c8b763f773fd9ce1bd6b17d21f1f09f5a4bc3959ca2f7cfec44f1197bb093aad

    SHA512

    4b1de9e04c4c36353723084cd4bcb1b1bc46951700c0126209f36fc9d24ed1f7d88972359af4bd5198d3b4c27b0c2cde6e42f60ae89f134f08a3ac4623910327

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    38766a3d8f079152c9b60d7080e961cb

    SHA1

    9703f2241e23aff16824c067836f3bcd49621321

    SHA256

    68c153ad44d4ce3cc3b30088554b930906f9c00611140b77bd2715732ddc130e

    SHA512

    ebb45b9ab968eb5d15efccad6a6837c0cecfdc47297f94f513e07cfacd7ad74381e8eb50bcb9987be02fc79d488f92a475d41511c3f64a6550b16694fb824780

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    0959d60e439a9c903f4497519d28d5d8

    SHA1

    cd2f68d3b2e0e55e07ffdf5596d3ab124cb6f134

    SHA256

    1cad4bf48f897da738a0298e9c41eae3627bf8e3da11bb37551ba78285f43aaf

    SHA512

    9f0875bb55b1b5488136068b86071db0277e19b1e8b041d4c26707805a6817203698f3e05abf694aa9e091f8e903abe9a9481a61149e7f741554c838640ced1f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    72edbdc438ee3a026091cc7ee17f2169

    SHA1

    1ad4a32401319924962cb25f5c44d0ad01bc7426

    SHA256

    207c0a1ab4269bebaa37fab10b1f1c682b5d577fb5ab11f12e932eb439c6fae0

    SHA512

    24ae27c87e199011800bda6b683c81f1dd485000accb457d81363a572e36e6085d5f7288ac734ed0b93a7c3d4fb242b4df0522e8c1a54446af912d0f287d32b5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    9265a83ad689fe8a849ee89f8c1d7583

    SHA1

    c7482b7c11c8d17c526842680968c5a5feeb167d

    SHA256

    335f2be5082d18986f790c9189e143a277617031fc9973abfb05d33b50f90c40

    SHA512

    b231d0609d9e40ac22b7df483b111710d0d7d705f5ae144d6e70ce208a8b51b85b86bde0a52143b6d0a5431a66c79f139adfe49f4c5fec9f4f7b8f759ac7b859

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    be4de0424933f057249eda8794f48f7d

    SHA1

    1a8776920114a9ef41e2c5f5688529784fde8f88

    SHA256

    cba5885a81efcb8ecd58502ef5583c0dea5635fbfac42dccd7c651a8965ca21d

    SHA512

    0325008dd3a218a4264e2500ab7169fc6761bbf562ae7d25e89345dcb94405451639474ab19b0d688d1aca4b248e2e2a6629ccbeca0e9e3792c14ecf29bfe97d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    932aa6a3a45db2b441fb1e17666c033d

    SHA1

    6cb3a0ceb48f261f3fbfc4a39f49da3148f3f740

    SHA256

    fabad6be47292a96d60f8f224e6b90da1681e366c254346645fd9ce66098fa0a

    SHA512

    a59bb0440c84268410c2ce76523ba3c6caa68ea18d07a996abc0ba982aaf0840b2a67a2004438a7f55c3586fbaa094d70eb1cc0fac0ff93608fb7035ab155964

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    200d9ef96211490eb1274b8408af09f0

    SHA1

    8794ddadcd276720a4878fad754203357533d107

    SHA256

    30a3744d4ea3baeb02f681f266475243beaf9709ea86692d1c35a62f89aa708b

    SHA512

    7ca0e4fbde6442a911c3c5a5082b7468adc98095a13f822af947783c578852e7be8fc1e1e5191fddc960fb1a6845c08318ba2c10a8ac772dbececddac29d05c3

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    5f19c042505ef175348e26ac2179623e

    SHA1

    87bbd182983d6db4b86c6164377ea5e243bfbff0

    SHA256

    7eeac461095898cd37d36dd5d3c7c0f9fb20c562079fc5a192e289ddb66027de

    SHA512

    d15fe0630e8cad184effab0931ad0b9112da99a4bf3c78e783fe0bd4ead7b13b673d9d911c2a7afb2100f5d4e27c383f86326bbe277b6a2586cad505fc97b3bd

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    bc543b79f8c6e8c4792d38abff6421e3

    SHA1

    75ebf426e8c18b86ebdf366c5d73ac533ad3033e

    SHA256

    cf97257cda05576a13afd640ba6f8cb577a4a5199a16ff3ed88ec630836e0ac8

    SHA512

    c574ca0dbb12ec4da5f09b5bd398cf25531bee5d4faf7ce3ed7bc1b25ba8668c768ac795c57930e66198c5b87c937c771dde14e99060a82de1818317bba769c2

  • /data/data/com.systemservice/files/PersistedInstallation1909821990661048365tmp

    Filesize

    556B

    MD5

    869509d10cc7e1240e882c924a2ee060

    SHA1

    908ba529af456b3b7989e4ad8314b6d682d3bfc0

    SHA256

    fda6aad17cf8795d258724f52699f5484eea9876585504654b0da3c3062233e6

    SHA512

    b0f178b480dc10ac6e897bb5c04fac0649b7908da2175067dbbf073cde286b66e1e9085df6e7468551a32bbc46ef2274b8303f3d0580e55a6ab822c929c0006e

  • /data/data/com.systemservice/files/PersistedInstallation6890250497241479819tmp

    Filesize

    90B

    MD5

    9e0f61cec38791c4c1750ee7700124f2

    SHA1

    4609eabf0a009d8e82566779e3fd8c04172024f1

    SHA256

    aa8fb85c6f16e17c88f0179775d60be5dceb8b56890070db61548589dc94efe1

    SHA512

    c97dedda42d46a68f20c536db82c94560dc6ae47ef4d9e9f4ac719bbc9a9e8b6da4a384b38cc85d18a44ac90f966fe2872d0800c919240212c9ecb3d8522e85f

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    8e55b45e3e51e50c8e1481052638dbff

    SHA1

    f582bacc0518e634cc8c7448cacaac27696936af

    SHA256

    7c3eec3aec31d2ef87bc1b8720113d9bb2f8e3f7d0b9d3c0fff36ddbfa95aa14

    SHA512

    a56eab70f265794476c24e79893de646e5fd80d757eb595de16875b37f6f2c84d655098e648a1b64e9f1ca715d8dc3e270a3c0235003cb3a074d4b8b190c7c3a